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AMENDMENTS TO THE CLAIMS 

The listing of claims replaces all prior versions and listings of claims. Only those claims 
being amended herein show their changes in highlighted form, where insertions appear as 
underlined text (e.g., insertions ) while deletions appear as strikethrough text or brackets (e.g., 
d e let i ons or [[deletions]]). Accordingly, please amend Claims 1,10 and 19 without prejudice or 
disclaimer: 

1 . (Previously Presented) A apparatus for a baseline authentication agency for 
determining a user's login status as the user accesses a site within a network, said apparatus 
comprising: 

a database storing information about partner web sites that have been linked by 
a use r for defining login parameters of the user associated with one or more of the 
partner web sites : 

a baseline authentication agency server r e sponsible fo r for providing core global 
network authentication services configured: 

to receive a request from a user's browser, the request comprising: 
a site identification identifying a site; and 
a cookie related to the user and including; 

a reference to the baseline authentication agency; and 
an identifier distinguishing the baseline authentication 
agency from a set of baseline authentication agencies ; 
to determine whether the cookie is valid; 

to determine whether the user has authorized seamless login for the site 
using the information from the database; and 

to generate a login ticket for the site and send the login ticket to the 
user's browser if the cookie is valid and the user has authorized seamless login 
for the site; 

wherein the cookie is stored on a global network domain used for cookie sharing 
and the site is one of a collection of partner sites with access to cookies shared on the 
global network domain. 

2. (Previously Presented) The apparatus of Claim 1, wherein the baseline 
authentication agency provides authentication services for a subset of users of the global 
network domain, the baseline authentication agency server further configured to: 

after authenticating the user, write the site identification along with an 
authenticated status of true into the cookie of the user stored on the global network 
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domain and shared and accessible by the collection of partner sites; and after the user 
logs out of said global network domain, reset the user's authenticated status to false in 
the cookie. 

3. (Previously Presented) The apparatus of Claim 1, wherein the baseline 
authentication agency server is further configured to: 

receive the ticket from the site; 
determine whether the ticket is valid; and 

if the ticket is valid, send user identification information to the site, the user 
identification information to be used by the site to login the user. 

4. (Previously Presented) The apparatus of Claim 1, wherein the baseline 
authentication agency server is further configured to: 

send a message to the user's browser that indicates that no ticket is available if 
the cookie is not valid or if the user has not authorized seamless login for the site. 

5. (Previously Presented) The apparatus of Claim 1, wherein the baseline 
authentication agency server further comprises: 

a globally unique identifier for each global network user account, wherein said 
globally unique identifier is a primary key with which the database is indexed. 

6. (Cancelled) 

7. (Cancelled) 

8. (Cancelled) 

9. (Cancelled) 

10. (Previously Presented) A computer-implemented method for a baseline 
authentication agency that determines a user's login permission for a site, the method 
comprising: 

receiving a request from a user's browser, the request comprising a site identifier 
related to a site, and a set of user information related to a user and including a 
reference designating the baseline authentication agency; 

determining whether the set of user information is valid; 

if the set of user information is valid, 

determining whether the user has authorized seamless login for the site.,. 

the site designated the by the user to establish the site as one of a group of 

partner sites for which the user has defined login parameters ; and 
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generating a login ticket for the site and sending the login ticket to the 
user's browser if the user has authorized seamless login for the site; 

1 1 . (Previously Presented) The method of Claim 1 0 further comprising: 
checking if the site identifier is known or valid. 

12. (Previously Presented) The method of Claim 10, further comprising: 
generating JavaScript code writing out an HTML form comprising the login ticket as a 

hidden field and writing out a partner Web site global network login handler as an action URL, 
and auto-submitting said form such that the browser posts the form to a partner Web site global 
network login handler URL on the partner site. 

13. (Previously Presented) The method of Claim 10, wherein the set of user 
information is a cookie. 

14. (Previously Presented) The method of Claim 10, wherein the site is one of a 
collection of partner sites. 

15. (Previously Presented) The method of Claim 10, wherein generating the login 
ticket for the site comprises generating JavaScript code that stores the login ticket. 

16. (Previously Presented) The method of Claim 15, wherein sending the login 
ticket for the site comprises sending the JavaScript code. 

1 7. (Previously Presented) The method of Claim 1 0, further comprising: 
if the set of user information is valid, 

receiving the ticket from the site; 
determining whether the ticket is valid; and 

if the ticket is valid, sending user identification information to the site, the 
user identification information to be used by the site to login the user. 

18. (Previously Presented) A storage medium having a computer program stored 
thereon for causing a suitably programmed system to process computer-program code by 
performing the method of Claim 10 when such program is executed on the system. 

19. (Previously Presented) A baseline authentication agency configured to 
determine a user's login permission for a site, the baseline authentication agency comprising: 

a list of partner sites that have been linked designated by a user and include 
login parameters for the user associated with one or more of the sites ; 
a baseline authentication agency server configured to: 
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receive a request from a user's browser, the request comprising a site 
identifier related to a site, and a set of user information related to a user and 
referencing the baseline authentication agency; 

determine whether the set of user information is valid; 

determine whether the user has authorized seamless login for the site; 

and 

if the set of user information is valid and the user has authorized 
seamless login for the site, 

generate a login ticket for the site; 
send the login ticket to the user's browser. 
20. (Previously Presented) The baseline authentication agency of Claim 19, 
wherein the baseline authentication agency server is further configured to: 
receive the ticket from the site; 
determine whether the ticket is valid; and 

if the ticket is valid, send user identification information to the site, the user 
identification information to be used by the site to login the user. 
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